Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc6bea3f-85ac-4960-bee4-67731adcacb5.roa
File:                     cc6bea3f-85ac-4960-bee4-67731adcacb5.roa (raw, json)
Hash identifier:          D5fzZOfz+49csn06nRq57XaAo7ivYu/gN36jXoakjho=
Subject key identifier:   D6:99:0E:60:D9:A3:12:53:9C:4A:FC:ED:54:B8:25:3A:AF:59:2A:7C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3F27FBFEB95AB13265F52CAC027C1D602FFAABC3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc6bea3f-85ac-4960-bee4-67731adcacb5.roa
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
ROA not before:           Mon 15 Apr 2024 00:00:00 +0000
ROA not after:            Mon 20 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        99.82.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:27:fb:fe:b9:5a:b1:32:65:f5:2c:ac:02:7c:1d:60:2f:fa:ab:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:00:00 2024 GMT
            Not After : May 20 23:59:59 2024 GMT
        Subject: serialNumber=7eec34993d1e9e1b58e8d36a3a531cf8ebd9fb268742fff76f5a64e90e3a7d2e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1f:f1:f7:3e:e7:cc:a6:b7:79:6d:e8:8e:ca:
                    ae:d7:08:57:1d:52:49:6e:f7:11:31:a9:4d:f2:ea:
                    24:bf:27:1f:65:3a:4b:65:6b:de:e0:15:2e:f8:02:
                    0a:f1:a7:f2:e6:9b:fb:62:ab:db:4d:89:be:88:7d:
                    23:ef:3b:78:b8:93:b5:41:a8:1a:cc:e1:7b:14:1f:
                    fc:66:4f:3f:0e:35:e7:0a:c1:6b:54:64:ca:38:dc:
                    34:3f:f0:33:10:e4:89:b8:82:a0:47:b0:9f:5c:d2:
                    be:eb:69:01:a8:cc:31:c0:67:fa:60:20:c4:86:a6:
                    cc:a7:9c:a4:fc:a8:83:ae:67:3d:df:57:1d:e2:a6:
                    25:df:f1:4b:6f:52:59:87:c5:79:52:71:2b:ff:f3:
                    31:d8:48:5b:e3:81:46:40:26:d5:72:27:02:b1:d8:
                    43:02:75:75:39:52:92:e2:b2:64:ff:af:50:bc:23:
                    6e:4b:7b:fc:f0:c8:e1:f7:08:0a:5d:2e:a1:90:d2:
                    32:a6:0b:d5:41:14:02:7c:3b:45:13:7e:53:f2:07:
                    23:09:19:94:31:45:6c:eb:ff:30:d7:8c:e9:c1:ab:
                    0b:5f:04:9d:47:fd:b7:5d:91:dd:43:88:4d:eb:51:
                    ee:cf:73:25:93:cb:ff:a4:8d:62:57:3b:b8:c0:5a:
                    f1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:99:0E:60:D9:A3:12:53:9C:4A:FC:ED:54:B8:25:3A:AF:59:2A:7C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc6bea3f-85ac-4960-bee4-67731adcacb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.82.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:6e:16:c5:1e:84:06:29:93:ea:2c:fc:ba:a6:e6:fa:9d:fe:
         3b:c9:8b:5f:48:91:9b:e0:53:f4:12:3d:f0:ed:cd:b6:d5:42:
         93:73:9a:7d:02:ee:ef:50:ba:e2:dd:e3:41:91:d0:a9:f2:cb:
         d4:69:4d:d5:29:55:62:29:8d:e8:0b:00:d6:eb:cd:3d:7b:e8:
         d7:0e:0e:34:62:00:71:93:53:25:75:6a:b8:28:29:19:ff:f1:
         2c:fb:9d:a0:2f:b2:ea:29:35:05:b9:99:46:11:c3:c1:65:0a:
         d4:46:44:5c:ce:e5:3d:00:80:56:09:47:f2:97:3a:1f:3b:a4:
         81:97:d2:c5:00:64:07:ae:8d:c6:4e:0b:1f:56:b8:76:4b:c3:
         4b:e7:dd:b0:31:fe:eb:43:7d:21:59:db:58:92:c2:a0:9b:24:
         76:46:07:0c:f0:dc:df:51:06:03:fc:ed:86:5e:1a:27:b1:04:
         49:d6:b1:6f:86:a4:31:5f:d0:d5:8a:1b:34:36:b7:95:86:e6:
         93:89:23:3d:48:c0:92:85:86:f4:0d:c8:74:55:1b:64:10:df:
         67:72:00:3b:b3:86:79:87:f4:9c:9c:04:c7:4d:09:ee:77:76:
         ab:9c:1f:84:00:cb:ae:88:db:b9:fd:ba:eb:45:1a:2a:5a:79:
         85:86:4a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 16:34:56 2024 by rpki-client on console-fra.rpki-client.org